1. What happened
On 24 February 2025, OKX (via its US-facing entity) pleaded guilty to operating an unlicensed money-transmitting business and agreed to penalties of roughly $504M - including forfeiture and fines. The plea documents the historical practice: US users could access the platform despite its terms, because enforcement relied on IP bans that were circumventable. In the plea's own framing: the ban existed in the terms; the enforcement was, for years, thinner than the terms.
2. Why this matters beyond OKX
The case is the clearest public documentation of what tos-only block means in practice: a contractual prohibition without technical enforcement is not an enforcement level at all - it is a liability transfer to the user. The OKX-era excuse "VPN made it possible" did not reduce the penalties; the US position was that the platform benefited from the users its terms "banned". This is exactly why our profiles distinguish tos_only from ip_block and kyc_block - the difference is not cosmetic, it is the difference between "we would prefer you didn't" and "you cannot".
Remember: The exchange's terms do not protect you. They protect the exchange. If enforcement is TOS-only, the risk of using it from a restricted country is 100% yours - including frozen funds and no recourse.
3. The timing coincidence - and the independence of risks
The plea landed in the same week as the Bybit hack. That coincidence is instructive: regulatory risk and security risk are independent axes. An exchange can be spotless on one and bleeding on the other - which is why our score system keeps Regulation, Security and Fees in separate indices rather than one blended number. A clean regulation score never compensates for a weak security posture, and vice versa.
4. The post-plea world
Post-settlement, OKX's practices changed materially: KYC-enforced access (including for US users via the relaunched OKX US), tightened geo-controls. The KYC block is now the industry standard for enforcement - which is precisely why our geo.enforcement field exists: it tells you whether a venue's restrictions are technical, contractual, or cosmetic.
5. When this analysis fails
Plea agreements are negotiated documents: they present the government's framing of facts that were never litigated. "Operating unlicensed" in 2017-2023 describes a regulatory landscape that was still forming - the same conduct got different treatment across prosecutors and years. What the case does establish cleanly: the enforcement-level distinction (TOS vs. technical) is not academic; it has $504M of precedent behind it.
Risk: If you trade on an exchange not available in your country, your practical position is defined by the weakest enforcement level in the chain - and by the exchange's legal exposure at any given moment. Both are in our profiles; neither is in their marketing.